Fake

Troj/FakeAV-BGE malicious file

Malware Removal

The Troj/FakeAV-BGE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Troj/FakeAV-BGE virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Troj/FakeAV-BGE?


File Info:

crc32: 0D88D987
md5: 3213fe9cb64ef8305020d60143dd6a8a
name: 3213FE9CB64EF8305020D60143DD6A8A.mlw
sha1: 11f555a0f4528870d97752ecd8b7c2cc8e45ae99
sha256: a5969eb83b1e3c64cb2c302eb71745b031ee7f694fd604b8a422d83752b1d48d
sha512: 51114cb9e1178dcd2746a105015ea5e8ef6c888cf7acbb05ed2a3b81167f283adfcbf6f8037d5805d6d02aea37520b898061a466f84aeb441ca203d65689cd2c
ssdeep: 6144:GqLeYSdA2g85e2Sqg3IBFvphVGk14/fKexK4ElDUrAi83XI:TeD5+qg3IJhVGkWqexKblDUrAi8HI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Troj/FakeAV-BGE also known as:

BkavW32.AIDetect.malware2
K7AntiVirusAdware ( 004bc8f31 )
Elasticmalicious (high confidence)
DrWebTrojan.Fakealert.15446
CynetMalicious (score: 100)
ALYacGen:Heur.Ransom.Cerber.2
CylanceUnsafe
ZillyaTrojan.FraudPack.Win32.18099
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/FakeAV.a3f0ee9d
K7GWAdware ( 004bc8f31 )
Cybereasonmalicious.cb64ef
CyrenW32/FakeAlert.GQ.gen!Eldorado
SymantecSpywareGuard2008
ESET-NOD32Win32/Adware.SpywareProtect2009
APEXMalicious
AvastWin32:Adware-gen [Adw]
ClamAVWin.Trojan.FraudPack-13
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.Ransom.Cerber.2
NANO-AntivirusTrojan.Win32.FraudPack.cvtysp
ViRobotTrojan.Win32.A.FraudPack.100000.AK
SUPERAntiSpywareTrojan.Agent/Gen-Frauder
MicroWorld-eScanGen:Heur.Ransom.Cerber.2
TencentMalware.Win32.Gencirc.114cfc2c
Ad-AwareGen:Heur.Ransom.Cerber.2
SophosTroj/FakeAV-BGE
ComodoTrojWare.Win32.Kryptik.~Fak@1rayeq
BitDefenderThetaAI:Packer.510DA4EC1F
VIPREVirTool.Win32.Obfuscator.ah!a (v)
TrendMicroTROJ_FAKEAV.SMDK
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.dc
FireEyeGeneric.mg.3213fe9cb64ef830
EmsisoftGen:Heur.Ransom.Cerber.2 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/FraudPack.shh
WebrootW32.Rogue.Gen
AviraTR/Dldr.FakeAler.RK
eGambitUnsafe.AI_Score_85%
Antiy-AVLTrojan/Generic.ASMalwS.3CD872
MicrosoftRogue:Win32/FakeSpypro
AegisLabTrojan.Win32.FraudPack.ldr7
GDataGen:Heur.Ransom.Cerber.2
AhnLab-V3Trojan/Win32.FakeAV.R152
McAfeeFakeAV-SpyPro.gen.d
MAXmalware (ai score=99)
VBA32BScope.Trojan.FakeAlert
PandaAdware/AntiSpywareSoft
TrendMicro-HouseCallTROJ_FAKEAV.SMDK
RisingMalware.Obscure/Heur!1.A89F (CLASSIC)
YandexTrojan.GenAsa!GGoR1EmmCWw
IkarusTrojan.Win32.FakeAV
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/FraudPack.AVGJ!tr
AVGWin32:Adware-gen [Adw]

How to remove Troj/FakeAV-BGE?

Troj/FakeAV-BGE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment